Thank you NC department of revenue…
I heard on the local news last night that the North Carolina Department of Revenue has lost a laptop that had ~30,000 state taxpayers information on it. Social Security numbers/etc… The report I saw that the state has setup a hotline to “teach citizens about identity theft” and have sent letters to those affected. Thanks… lose a laptop with 30,000 and then teach US about identity theft. How about teaching employees with sensitive information about encryption? ……. so I looked into it a bit further this morning.
According to this article the laptop was stolen from a car in the Raleigh area in DECEMBER. North Carolina has a “victims toolkit” at this address which is geared towards giving people the tools to request a freeze on their credit, notifying the three major credit bureaus, etc. (The report was from mid-January).
Also, people are encouraged to act quickly if they are notified that their information has been compromised.
It’s amazing to me that such large volumes of sensitive data are carried around and assumably NOT kept in an encrypted loop-back or some other protected store. Let’s face it, there ARE many tools for making a file relatively unreadable without a good passphrase. There is no indication in the reporting that I’ve seen that any steps were taken to encrypt the data for just such a possibility.
This get’s me back to something I’ve said many times to folks that say they won’t make a purchase online because they’re concerned about identity theft. These days, we are at the mercy of EVERY company that we do business with (including the state/federal and local governments). There is risk EVERY time you give someone your social security number or let the credit card swipe because more often than not it goes into a database somewhere. If the companies that are keeping the data have lax security or make poor choices, then you’re out of luck.
From the Charlotte observer’s report….
The employee’s car was locked, and she had followed department policies about securing the computer, Brooks told the Observer. The computer contained security features, but Brooks said officials are examining additional software safeguards.
So… I will assume they at least had a login password as part of their policy… I’m afraid that may have been all.
Popularity: 3% [?]
Related Posts - Get paid for the mistakes you make.... It seems that some companies are fortunate enough to be able to make money even from their faults. The Monterey Herald details an account of a woman who was informed by Choicepoint that crooks had accessed some of her personal information. This was apparently due to a lapse in security......
- Some companies unable to secure your data It's sad, but true. Some companies are just plain irresponsible with your data. Whether it be credit card information, or address and phone number there are those that aren't good about keeping their databases private. The securityfix is reporting that a recent survey found 12% of people had been notified......
- How common is data theft? According to this securityfix post it's a daily occurance. The email that he cites was from a woman who was informed by a company that a data backup had been "lost track of". There is a web site that chronicles such data security breaches. privacyrights.org. It's certainly worth a look.......
Related Websites - What Determines a Credit Score pt 1 Here is some basic information on what you need to know about credit scores and what goes into determining your credit score. What is responsible for determining my credit score? Your credit score has become a very important focal point for a variety of things. Your score is now the......
- 6 Easy Tips on Raising Your FICO Score In today’s world, it’s easy to define your self worth by your FICO score. Whether you are trying to buy a house, get more credit or just get back on the right track, a low FICO score can really impact your entire life. However, there are some easy steps that......
- What Is In Your Credit Report? Although every one of the credit reporting agencies is going to format and then report their information in a different and unique way, all of the various reports are going to contain basically all of the same information and categories. Your SSN or social security number will be listed, along......
Similar Posts
- Get paid for the mistakes you make….
- Chase throws data on 2.6 million customers in landfill
- All old scams are new again….
- That’s bad – data on Nuclear agency workers stolen…
- New Data Leaks section